This report is auto-generated from the latest RBAC Atlas scan (2026-09-18). It analyzes the RBAC permissions of 257 Kubernetes open-source projects across 27546 manifest versions to provide a snapshot of the current cloud-native threat landscape.
At a Glance
| Metric | Value |
|---|
| Projects analyzed | 257 |
| Total manifest versions | 27546 |
| Avg service accounts per project | 2.11 |
| Avg permission bindings per project | 31.24 |
| Avg workloads per project | 3.47 |
| Avg critical risks per project | 3.49 |
| Avg high risks per project | 4.0 |
| Avg medium risks per project | 2.04 |
| Avg low risks per project | 21.71 |
| Projects with critical risks | 170 |
| Projects with no RBAC permissions | 54 |
Risk Distribution
| Risk Level | Count | Percentage |
|---|
| Critical | 897 | 11.17% |
| High | 1029 | 12.82% |
| Medium | 523 | 6.51% |
| Low | 5580 | 69.5% |
| Total | 8029 | |
Top 10 RBAC Risk Tags
Top 10 Triggered Risk Rules
| Rule | Occurrences |
|---|
| Base Risk Level - Low | 7007 |
| Base Risk Level - High | 902 |
| Read ConfigMaps in a namespace | 258 |
| Read secrets in a namespace | 244 |
| Read secrets cluster-wide | 190 |
| Read ConfigMaps cluster-wide | 163 |
| Modify ConfigMaps in a namespace | 152 |
| List Namespaces (Cluster Reconnaissance) | 141 |
| Read RBAC configuration cluster-wide | 137 |
| Base Risk Level - Medium | 118 |
Top 10 Riskiest Projects
Ranked by weighted risk score (critical×10 + high×5 + medium×2 + low×1), using only the latest version of each project.
Top 10 Projects by Permission Count
